STIGQter STIGQter: STIG Summary: Oracle Database 11g Instance STIG Version: 8 Release: 20 Benchmark Date: 28 Jul 2017:

The Oracle SQL92_SECURITY parameter should be set to TRUE.

DISA Rule

SV-24919r2_rule

Vulnerability Number

V-2556

Group Title

Oracle SQL92_SECURITY parameter

Rule Version

DO3540-ORACLE11

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Enable SQL92 security.

From SQL*Plus:

alter system set sql92_security = TRUE scope = spfile;

The above SQL*Plus command will set the parameter to take effect at next system startup.

Check Contents

From SQL*Plus:

select value from v$parameter where name = 'sql92_security';

If the value returned is set to FALSE, this is a Finding.

If the parameter is set to TRUE or does not exist, this is Not a Finding.

Vulnerability Number

V-2556

Documentable

False

Rule Version

DO3540-ORACLE11

Severity Override Guidance

From SQL*Plus:

select value from v$parameter where name = 'sql92_security';

If the value returned is set to FALSE, this is a Finding.

If the parameter is set to TRUE or does not exist, this is Not a Finding.

Check Content Reference

M

Responsibility

Database Administrator

Target Key

1367

Comments